<?php

return [
    'keys' => [
        'current_kid' => env('OAUTH_JWT_KID', 'fotospiel-jwt'),
        'storage_path' => env('OAUTH_KEY_STORE', storage_path('app/oauth-keys')),
    ],
    'refresh_tokens' => [
        'enforce_ip_binding' => env('OAUTH_REFRESH_ENFORCE_IP', true),
        'allow_subnet_match' => env('OAUTH_REFRESH_ALLOW_SUBNET', false),
        'max_active_per_tenant' => env('OAUTH_REFRESH_MAX_ACTIVE', 5),
        'audit_retention_days' => env('OAUTH_REFRESH_AUDIT_RETENTION_DAYS', 90),
    ],
];